STIGQter: STIG Summary: Video Services Policy STIG Version: 1 Release: 11 Benchmark Date: 24 Apr 2020:

An IP-based VTC system implementing a single CODEC supporting conferences on multiple networks having different classification levels (i.e., unclassified, SECRET, TOP SECRET, TS-SCI) must support Periods Processing sanitization by purging/clearing volatile memory within the CODEC by powering the CODEC off for a minimum of 60 seconds.

DISA Rule

SV-55747r1_rule

Vulnerability Number

V-43018

Group Title

RTS-VTC 7060 [IP]

Rule Version

RTS-VTC 7060

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Sanitize volatile memory by disconnection of all power for at least 60 seconds.

Check Contents

Observe the operation of the VTC system as it transitions between networks. Verify that the CODEC is powered off for a minimum of 60 seconds during the transition. If it is not, this is a finding.

Vulnerability Number

V-43018

Documentable

False

Rule Version

RTS-VTC 7060

Severity Override Guidance

Observe the operation of the VTC system as it transitions between networks. Verify that the CODEC is powered off for a minimum of 60 seconds during the transition. If it is not, this is a finding.

Check Content Reference

M

Target Key

1418

Comments